Skip to main content
The Windows Remote Desktop connection lets your agents control Windows machines in your own environment over RDP. Unlike Computer Use (which provides a Duvo-managed Windows sandbox), this connection targets your existing Windows servers, cloud VMs, or terminal servers, giving agents access to your internal systems, installed software, and network resources.
Beta — This feature is currently in beta and may change.

​
Setup

Confirm prerequisites

A Windows machine accessible via RDP (Remote Desktop Protocol).
RDP enabled on the target machine (port 3389 by default).
A Windows user account with permissions to log in via RDP.
Network connectivity between Duvo and your Windows machine. For private networks, contact your Duvo account team to set up VPN access.

Grant the required permissions

The Windows user account used for the connection needs:
  • Remote Desktop Users group membership (or equivalent)
  • Permissions for the applications and files the agent will access
  • PowerShell execution policy that permits the automation scripts to run — prefer a least-privilege scope (for example, -Scope Process or -Scope CurrentUser, and signed scripts) rather than relaxing the policy machine-wide
  • Win+R (Run dialog) enabled in Group Policy (required for UI automation)
Scope the connecting account to only what the agent needs. Prefer a least-privilege PowerShell execution policy (for example, -Scope Process or -Scope CurrentUser, with signed scripts) rather than relaxing the policy machine-wide.

Add the connection in Duvo

On the Connections page, open Windows Remote Desktop and fill in these fields. Secrets are encrypted using Google Cloud KMS.
​
Integration Name
string
required
A custom name for this connection to help you identify it later.
​
Host
string
required
RDP host address — the IP address or hostname of the Windows machine.
​
Username
string
required
Windows username used for RDP authentication.
​
Password
string
required
Windows password used for RDP authentication.
​
Port
number
RDP port — leave blank to use the default (3389).
​
Domain
string
Windows domain, if the machine is domain-joined.
​
Jump Host
string
Hostname or IP of a bastion/jump server for two-hop connections.
​
Jump Port
number
SSH port on the jump host (defaults to 22).
​
Jump Username
string
User account on the jump host (required when a jump host is set).
​
Jump Password
string
Password for the jump host (provide either password or private key).
​
Jump Private Key
PEM
PEM-encoded private key for the jump host.
​
Jump Private Key Passphrase
string
Passphrase to decrypt the jump host private key.

​
How It Works

Duvo connects to your Windows machine using the standard Remote Desktop Protocol (RDP) over port 3389 by default (configurable). The connection is secured with TLS encryption and CredSSP authentication. For machines on private networks, Duvo routes traffic through a site-to-site VPN tunnel to your infrastructure. RDP is a bidirectional protocol — it transmits keyboard and mouse input to the remote machine while streaming the desktop display back. From the Windows perspective, input from Duvo looks identical to input from a local user, which is why desktop applications work seamlessly. The agent can launch programs, click through menus, and type into fields exactly as a person would at that machine.

​
Capabilities

  • Control Windows applications — Click, type, and navigate Windows applications installed on the target machine, subject to the connected user’s permissions.
  • UI Automation — Interact with UI elements by name and type, not just pixel coordinates, making automation more reliable for thick-client applications.
  • Sign in with stored Logins — Use saved logins from Logins and Secrets to sign in to applications on the remote machine, including one-time 2FA codes, without exposing passwords to the agent.
  • Run PowerShell scripts — Execute PowerShell commands and scripts directly on the remote machine.
  • Clipboard access — Read from and write to the Windows clipboard for data transfer between applications.
  • Access network resources — Reach internal file shares, databases, and services available from the target machine.
  • Live desktop view — Watch the remote desktop in real-time as your agent works.

​
Key Benefits

  • Your environment, your data — Work directly on your existing Windows infrastructure, with access to installed software and internal resources based on the connected user’s permissions.
  • Thick-client automation — Automate legacy Windows applications, custom business software, and systems that only run on Windows.
  • UI-aware interaction — The UI Automation feature finds and interacts with UI elements by their properties, not just screen positions, making automations more robust.
  • Enterprise integration — Connect to Windows machines behind your firewall, on your VPN, or in any cloud or on-premises environment.
  • Full visibility — Watch the session live and review screenshots of every action for compliance and debugging.

​
Works Well With

https://mintcdn.com/duvo-d8027998/O3tlM6eCuFk2uJpN/images/connections/snowflake.svg?fit=max&auto=format&n=O3tlM6eCuFk2uJpN&q=85&s=42fbf1853c296d1876c3b1fc21a8779e

Snowflake

Pull data from your warehouse or ERP, then enter it into a Windows-only application.
https://mintcdn.com/duvo-d8027998/O3tlM6eCuFk2uJpN/images/connections/gmail.svg?fit=max&auto=format&n=O3tlM6eCuFk2uJpN&q=85&s=ad4e229283f3fe2f26c0f96a49f28e13

Gmail

Process files in desktop applications and send results by email.

​
Limitations

  • Elevated (administrator) processes cannot be automated if the RDP user runs at a lower privilege level.